Bogdan Boceanu, 30, was sentenced to 80 months in federal prison, and Andrei Bolovan, 29, was sentenced to 27 months.
The two were apparently part of a loose-knit conspiracy of Romanian nationals that shared files, tools, and stolen data obtained through phishing attacks targeting customers of People's Bank, Citibank, Capital One, Bank of America, JPMorgan Chase & Co., Comerica Bank, Regions Bank, LaSalle Bank, U.S. Bank, Wells Fargo & Co., eBay, and PayPal.
An FBI investigation uncovered more than 12,000 stolen credit and debit card numbers in Boceanu's e-mail accounts beween 2004 and 2009, while Bolovan's e-mail accounts contained more than 1,200 stolen credit and debit card numbers.
Bolovan pled guilty on December 5, 2012 to one count of conspiracy to commit fraud in connection with access devices.
On December 11, 2012, a jury found Boceanu guilty of one count of conspiracy to commit fraud in connection with access devices and one count of conspiracy to commit bank fraud.